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Abstract 

In this paper, we study a model of quantum Markov chains that is a quan¬ 
tum analogue of Markov chains and is obtained by replacing probabilities in 
transition matrices with quantum operations. We show that this model is very 
suited to describe hybrid systems that consist of a quantum component and a 
classical one, although it has the same expressive power as another quantum 
Markov model proposed in the literature. Indeed, hybrid systems are often 
encountered in quantum information processing; for example, both quantum 
programs and quantum protocols can be regarded as hybrid systems. Thus, 
we further propose a model called hybrid quantum automata (HQA) that can 
be used to describe these hybrid systems that receive inputs (actions) from the 
outer world. We show the language equivalence problem of HQA is decidable 
in polynomial time. Furthermore, we apply this result to the trace equivalence 
problem of quantum Markov chains, and thus it is also decidable in polynomial 
time. Finally, we discuss model checking linear-time properties of quantum 
Markov chains, and show the quantitative analysis of regular safety properties 
can be addressed successfully. 
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1. Introduction 


As we know, Markov chains as a mathematical model for stochastic systems 
play a fundamental role in computer science and even in the whole field of infor¬ 
mation science. A Markov chain is usually represented by a pair (P, tto) where 
ttq is a vector standing for the initial state of a stochastic system, and P is a 
stochastic matrix 0 characterizing the evolution of the system. Over the past 
two decades, quantum computing and quantum information have attracted con¬ 
siderable attention from the academic community. Then it is natural to study 
the quantum analogue of Markov chains. Actually, the terminology “quantum 
Markov chains” have appeared many times in the literature al¬ 

though it does not mean exactly the same thing in different references. A usual 
approach to defining quantum Markov chains is to view a quantum Markov 
chain as a pair (f, po) where po; a density operator, denotes an initial state of 
a quantum system, and f is a trace-preserving quantum operation that char¬ 
acterizes the dynamics of the quantum system. This resembles very closely a 
classical Markov chain represented by a pair (P, tto). Indeed, in the textbook 


19l| , when quantum operations were introduced, they were viewed as a quantum 


analogue of Markov processes. In 17|,l28j, a quantum Markov chain means the 


same thing as mentioned here, while it mainly means a quantum walk in ll| . 

In this paper, we focus on the quantum Markov model reported in [3,1^ 
which is greatly different from the one mentioned above but will be shown to be 
very suited to describe hybrid systems that consist of a quantum component and 
a classical one. Such a quantum Markov chain can be roughly represented by a 
pair (M, po) where M is a transition matrix resembling P in a classical Markov 
chain but replacing each transition probability with a quantum operation and 
satisfying the condition that the sum of each column of M is a trace-preserving 
quantum operation, po, standing for the initial state of the model, is a vector 
with each entry being a density operator up to a factor. This model looks very 
strange at first glance, but it has the same expressive power as the conventional 
one given by (f,po)- Specially, we will show that this model is very suited to 
describe hybrid systems that consists of a quantum component and a classical 
one. Indeed, hybrid systems are often encountered in quantum computing and 
quantum information, varying from quantum Turing machines and quan¬ 


tum finite automata 


QH 


to quantum programs 2M quantum protocols 


^In this paper, a matrix is said to be a stochastic matrix if each column of it is a probabilistic 
distribution. 
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such as BB84. Quantum engineering systems developed in the future will most 
probably have a classical human-interactive interface and a quantum processor, 
and thus they will be hybrid models. Therefore, it is worth developing a theory 
for describing and verifying hybrid systems. 

In order to describe hybrid systems that receive inputs or actions from the 
outer world, we propose the notion of hybrid quantum automata (HQA) that 
generalize semi-quantum finite automata or other models studied by Ambainis 
and Watrous, and Qiu etc (see e.g. [1, H, 21, 30, 31, 29|). In fact, these au¬ 


tomata in the mentioned references as hybrid systems have been described in a 
uniform way by the authors [l^. When viewing HQA as language acceptors, 
we show their language equivalence problem is decidable in polynomial time by 
transforming this problem to the equivalence problem of probabilistic automata. 
Furthermore, we apply this result to the trace equivalence problem of quantum 
Markov chains, showing the trace equivalence problem is also decidable in poly¬ 
nomial time. 

Finally, we consider model checking linear-time properties of hybrid systems 
that are modeled by quantum Markov chains. We show that the quantitative 
analysis of regular safety properties can be addressed as done for stochastic 
systems, by transforming it to the reachability problem that can be addressed 
by determining a least solution of a system of linear equations. For general uj- 
regular properties, the similar technical treatments used for stochastic systems 
no longer take effect for our purpose, and some new techniques need to be 
explored in the further study. 


2. Preliminaries 

A Hilbert space is usually denoted by the symbol %. dim{'H) stands for the 
dimension of TL. Let £('H) be the set of all linear operators from H to itself. 
A*, Al and denote respectively the conjugate, the conjugate-transpose, and 
the transpose of operator A. The trace of A is denoted by Tr(A). A £ jC{'H) is 
said to be positive, denoted by A > 0, if {ijjlAltp) > 0 for any \ip) £ TL. A> B 
if A — i? is positive. Let 

V{'H) = {A£ C{Ti) : A > 0}. 

Given a nonempty and countable set 5", let 

DistniS) = {/X : S' -5> P(H) : ^ Tr(/x(s)) = 1}. 

sgS 

Elements in Dist-u{S) are called positive-operator valued distributions. 
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The detailed background on quantum information can be referred to the 


textbook [l9| and lecture notes [27|. Here we just introduce briefly some nec¬ 
essary notions. States of a quantum system are described by density operators 
that are positive operators having unit trace. Let 


V{'H) = {A& V{n) : Tr(H) = 1}, 


which denotes the set of all density operators on Hilbert space %. An element 
in T>{H) is generally indicated by the symbol p. A positive operator with trace 
less than 1 is called a partial quantum state. 

A mapping £: C{'H) is called a super-operator on H. £ is said to be 

trace-preserving if Tr(f (A)) = Tr(A) for all A G Let lu and 0^ denote 

the identity and zero super-operators, respectively, and if T-i is clear from the 
context the subscript % is omitted. For two super-operators £ and iF, their 
summation, subtraction and multiplication, denoted hy £ -\-F, £ — F and £oT 
respectively, are defined by 

{£ F F){A) = £{A) + T{A), 

[£-F){A) = £{A)-T{A), 

£oT{A) = £{T{A)) 

for all A G C{T-L). We always omit the symbol o and write £F simply for 
£ o F. The relation ~ between super-operators on % is defined by: ~ if 

Tr(£:(p)) = Tr(J'(p)) for all p G V{n). 

The evolution of a quantum system is characterized by completely positive 
super-operators (CPOs) . Here we do not recall the original definition of “com¬ 
pletely positive”, but give an equivalent characterization. A super-operator £: 
jC-iT-L) F{'H) is said to be completely positive if and only if it has an operator- 
sum representation (also called Kraus representation) as 

k 

where the set {Ek G jC-iH)} are called operation elements of £. £ is trace¬ 
preserving if and only if its operator-sum representation satisfies the following 
completeness condition 

( 1 ) 

k 

If Eq. ([T]) is replaced by < 7, then £ is said to be trace-nonincreasing. 

By SX{'H) we mean the set of all trace-nonincreasing CPOs on T-L. Here the 
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reason why we used the notation ST{'H) is to keep up with the one in 
Elements in SI{T-L) are called quantum operations 19|. Trace-preserving CPOs 
are called trace-preserving quantum operations. 


Here we recall the concept of selective quantum operations |26| that are 
actually trace-preserving quantum operations equipped with a physical inter¬ 
pretation. A selective quantum operation is a mapping that takes as input 
p G V{'H) and outputs a probability over pairs of the form (t, pr), where r G A 
and Pr G T>{H). We refer to r as the classical output of the operation; this 
may be the result of some measurement performed on p, but this is not the 
most general situation. A selective quantum operation £ is described by a set 
of operation elements 

{Er.k '■ T G A, k G Kr} 


which satisfy the completeness condition X^reA 
r G A, we defined as follows: 


E 


i,Er k = I- For each 


fce/fx ^T,k^r,k 




fcgiC. 


Then £ is represented hy £ = {$r : t G A}. For t G A, let Pr = Tr($ 7 -(p)) and 
Pr = ^t(,p)IPt (in case Pr = 0, pr is undefined). Now, on input p, the output 
of £ is defined to be (r, pr) with probability Pr- 

In the following, we recall a useful linear mapping vec from 27| which maps 
a matrix A G to an n^-dimensional column vector, defined as follows: 


vec{A){{i - l)n + j) = A{i,j). 

In other words, vec{A) is the vector obtained by taking the rows of A, trans¬ 
posing them to form column vectors, and stacking those column vectors on top 
of one another to form a single vector. For example, we have 

a \ 
b 
c 

K d 

li we let |i) be an n-dimensional column vector with the ith entry being I and 
else O’s, then {|f)(j| : i,j = I,-- - ,n} form a basis of C"^". Therefore, the 
mapping vec can also be defined as vec{\i){j\) = |i)|j). 

Let A, B, C he n X n matrices. Then we have 

= {Ai^ B^)vec{X), 

= vec{A^)^vec{B). 


A = 


a b 
c d 


and vec(A) = 


vec{AXB) 

Tr{AB) 
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( 2 ) 

( 3 ) 






Throughout this paper, we use [S'] to denote the cardinality of the set S. 


3. Quantum Markov chains and hybrid systems 


As mentioned in Introduction, it is natural to propose the quantum analogue 
of Markov chains, while Markov chains have been shown to play a fundamental 
role in information science and quantum information processing has attracted 
more and more attention from the academic community. In the literature, there 
are several notions of quantum Markov chains defined from different perspec¬ 
tives, but in this paper we focus mainly on the one reported in 
following, we show that the quantum Markov model given in [1, Q 
to describe hybrid systems, although it has the same expressive power as the 


In the 
is very suited 


conventional one given in [^[^. Before that, we recall some necessary defini¬ 
tions below. 

One natural viewpoint is to regard a quantum Markov chain as a pair of a 
trace-preserving quantum operation and a density operator. Here we keep up 
with the notations used in 12811. 


Definition 1. A quantum Markov chain (qMC) is a triple A4 = (H,f,/9o) 
where: 


• T-L is a Hilbert space; 

• £ is a trace-preserving quantum operation over H; 

• pq is the initial density operator over H. 

A4 is said to be finite if dim{'H) is finite. 

The physical interpretation of qMC A4 is: a quantum system with Hilbert 
space H starts in the initial state po, and at each step the state evolves according 
to £. Usually, we do not give explicitly the underlying Hilbert space H, and 
thus a qMC is simply denoted by the pair (f,po)- The state at the nth step is 
denoted by pn- Then we have 


Pn = £^{P0) (4) 

where is inductively defined by: (i) £° = X and (ii) = ££^~^ for n = 

Another quantum analogue of Markov chains was reported in [9|, [Sj , and we 
call it hybrid quantum Markov chain (hqMC). The reason why we called them 
“hybrid” will get clear soon. The definition is as follows. 
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Definition 2. An hqMC is represented by a tuple Ai = M, fj,o) where: 

• T-L is a Hilbert space; 

• S is a nonempty and countable set of states; 

• M : S X S ^ SI{'H) such that ® trace-preserving quantum 

operation for each s G S. 

• p-o G Dist-u(S) denotes the initial distribution. 

Ai is said to be finite, if S and dim{'H) are finite. 

Visually, hqMC A4 can be represented by a transition graph (a digraph) 
where states from S act as vertexes and there is an edge from s to t with label 
M(t,s) if and only if M{t,s) ^ 0 . For example, Fig. [T] represents an hqMC 
whose state set is S' = {sq, si, S 2 } and whose transition function AI is given by 

-^(sijSo) = Soi,M(s 2 ,So) = £o 2 ,M{s 2 ,S 2 ) = £22, M{si, S2) = £21, M{si, Si) = 

X where all given quantum operations are nonzero. 



Figure 1: Transition graph of an hqMC. 

In the sequel, we identify the transition function M with a |S| x |S| matrix of 
which each entry is a quantum operation and the sum of each column is a trace¬ 
preserving quantum operation. M{t,s) denotes the entry in the tth row and 
the sth column. Similarly, pQ is viewed as a |S|-dimensional column vector with 
each entry being a positive operator and their sum being a density operator. 
/ro(s) denotes the sth entry. A rough interpretation of hqMC Ai is: the system 
first starts in p^ and then at each step evolves according to M. At the nth step, 
the state is denoted by 


Pn — M'^po 

where M” is inductively defined by: i) is a diagonal matrix with the diagonal 
entries being I and other entries being 0, and ii) M” = MM” Note that the 
multiplication of an entry in M and an entry in pn is in the sense of performing a 
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quantum operation on a partial quantum state. For example, for = Mfj,Q we 
have i)(Mo(i)) for s G S' where quantum operation M{s,t) 

is performed on the state 

In the following, we show that the model of hqMC M = {TijS, M, hq) is 
very suited to describe hybrid systems that are dynamic systems consisting of 
two interactive components: a quantum one and a classical one, although this 
might not be clearly noticed when the model was proposed at the beginning. As 
shown in Fig. [5J there is a hybrid system consisting of a quantum component 
whose state space is H and a classical component whose state set is S. The 
behavior of this system is exactly described by A4. More specifically, at each 
step the hybrid system evolves as follows. 

(i) Firstly, depending on the current classical state s, quantum state p evolves 
according to Mg. Mg denotes the selective quantum operation described 
by the sth column of M, that is, Mg = {M{t, s) : t G Thus, on input 
p, the output is {t,M{t,s){p)/pt) with probability pt = Ti'{M{t,s){p)). 

(ii) Secondly, the classical state s evolves into state t, where t is the output 
of the above quantum evolution. Equivalently, a transition function ■ 
S ^ S changes each state to t. If S is finite, then the classical component 
can be viewed as a DFA whose state set and input alphabet are both S and 
whose transition function maps the current state to the state indicated by 
the current input symbol. 

The initial state of the hybrid system is (s, po{s)/pg) with probability pg = 
Tr(po(s)) where s G S denotes the classical state. 


M 



Figure 2: An hqMC describing the behavior of a hybrid system. 






















As shown above, the hqMC model is suited to describe hybrid systems. In¬ 
deed, hybrid systems are often encountered in quantum information processing. 
For example, quantum programs can be regarded as hybrid systems, since as 
stated by Selinger [2^, quantum programs can be described by “quantum data 
with classical control flows”. Quantum data are represented by states of the 
quantum component and classical control flows are state evolutions of the clas¬ 
sical component. Also note that the quantum Turing machines defined in 
and quantum finite automata studied in [l^ are all hybrid systems. In addition, 
as shown in , quantum cryptographic protocols such as BB84 protocol can be 
described by hqMC. We think that hybrid systems will be encountered more of¬ 
ten as the study of quantum information goes ahead. In fact, since what we can 
observe are classical, the quantum engineering systems developed in the future 
will most probably have a classical human-interactive interface and a quantum 
processor, and thus they will be hybrid systems. 


On should distinguish “hybrid systems” in this paper from those in 
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23|. 


Hybrid systems in [ifl, [23| are digital real-time systems embedded in analog en¬ 
vironments. Those systems combine discrete and continuous dynamics. There 
have been a long list of publications devoted to the verification of these hybrid 
systems. Hybrid systems in our paper are such systems that combine classi¬ 
cal discrete dynamics and quantum discrete dynamics (it is also possible to 
consider quantum continuous dynamics), and in the sequel, when mentioning 
“hybrid systems” we always adopt this meaning. As mentioned above, hybrid 
systems often present in quantum information processing. Therefore, it could 
be meaningful and interesting to develop a theory of describing and verifying 
these systems; Feng et al’ s work Q can be seen as a first step toward this 
direction. 

In the following, we clarify the relationship between the two models of quan¬ 
tum Markov chains presented in this section. First, a qMC is obviously a special 
hqMC, since when there is only one classical state in an hqMC, it reduces to a 
qMC. On the other hand, we will show that each hqMC can also be simulated 
by a qMC. This is formally expressed in the following theorem. 

Theorem 1. Given an hqMC M = {H, S, M, ^lq), there exists a qMC M' = 
('H',f,Po) such that the states pn and /i„ of M! and A4 at the nth step, respec¬ 
tively, satisfy: 

Pn = '^ |s){s| (g) p,ri{s) 
seS 


for n = 0,1,-■ 
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Proof. The qMC M.' = {T-L',E,pq) is constructed as follows: 

• 1-1'= Hs ® H where Hs = span{\s) : s € 5}; 

• Po= J2ses |s)(s| ® Mo(s); 

• f is a trace-preserving quantum operation on H' which is constructed to 
simulate the interactive actions between the quantum component and the 
classical one in Fig. [H 

More specifically, E is described by the set of operation elements 

{\t){s\® ■. s,t & S,k & Kts\ (5) 

where for each pair t, s G S', : k G Kts] are operation elements of the 

quantum operation M{t, s). 

Then E is trace-preserving since we have 

s,t£S kGKts 

= E E 

s,t£S \ k£Kts 

=E(i^)(^i®E E 

s^S \ t^S k^Kts 

ses 

where I^s and In denote identity operators on Us and %, respectively. In the 
above, equation (a) holds because : k G Kts, t G S} are operation elements 
of the selective quantum operation Ms . 

Furthermore, for p (g) p G C{Hs 0 H), by a direct calculation we have 

E{p®g)= {s\p\s)\t){t\® M{t,s){g) (6) 

s,tGS 

From the above, it can be seen that the intuitive idea of E is as follows: i) 
first perform the measurement {Es = |s)(s| : s G S} on the classical system 
to observe its state; ii) if s is the result, then perform the selective quantum 
operation Mg = {M{t,s) : t G S'} on the quantum system; iii) if the classical 
output of Ms is t, then perform Et on the classical system changing its state to 
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t. Note that Tt is a trace-preserving quantum operation for each t G S, since 
it has operation elements {F^ = |t)(s|,s G S} that satisfy the completeness 
condition. 

Now by induction on n we prove pn = ® A^n(s) for n = 0,1, • • •. 

First when n = 0, we have po = ® Mo(s). Suppose it holds for n. 

Then from Eq. (jd)) we have 

Pn+l = S{pn) = ^ [X! ® 

Vtes 

s,s'gS tGS 

s'gs tes 

= |s')(s'l ® M«+i(s')- 

s'gS 

Thus, we have completed the proof. □ 

From the above discussion, we know that qMC and hqMC have the same 
expressive power. However, they are suitable for describing different systems. 
While it is natural to describe a purely quantum system using the qMC model, 
it is convenient to describe a hybrid system using the hqMC model. 


4. Hybrid quantum automata 

Based on the hqMC model, we propose an automaton model—hybrid quan¬ 
tum automata, which generalizes the models in 1^ and can be used to describe 
hybrid systems that receive inputs (or actions) from the outer world. 

First, some notations are explained below. As usual, for nonempty set S, 
by E* we mean the set of all finite-length strings over E. Let E+ = E* \ {e} 
where e denotes the empty string. For u G E*, |u| denotes the length of u. Let 
E” = {u G E* : |u| = n} and E^" = {u G E* : |m| < n}. 

Definition 3. A hybrid quantum automaton (HQA) is a tuple 




where 

• % is a Hilbert space; 

• S is a countable nonempty set of states; 
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• Y, is an alphabet of symbols; 

• /io G Distu{S) is the initial distribution; 

• For eaeh a € : S x S ^ SXifH) such that X^teS '®) ® 

trace-preserving quantum operation for each s € S; 

A is said to be finite, if S, E and dim{'H) are finite. 

The behavior of A is roughly as: A starts in p.o, and at each step, it scans 
the current input symbol ct G E, and then updates its state according to M^. 
In this paper, we regard HQA ^ as a language acceptor, that is, for each input 
w €T,*, A observes its final state after scanning all input symbols and accepts if 
the final state satisfies some given property. Generally, the accepting behavior 
is probabilistic, because of the inherent probabilism of quantum mechanics. 

Here, we have two basic approaches to defining the automaton’s accepting 
fashions. One is based on classical states: A accepts its input w G E*, if its 
classical state after scanning the whole input belongs to a subset F C S'. In this 
case, the model is represented by a tuple A = ("H, S, E,/xq, {MdcrgE, F), A is 
said to accept with classical fashion, and we call it a C-HQA for short. Then 
C-HQA A defines a function F^ : E* —> [0,1] as 

PaM = X! Tr((M„^o)(s)) 

seF 

where and is a diagonal matrix with the 

diagonal entries being F and others being 0. Pa{w) denotes the probability 
that A accepts w. 

Also, we can define that HQA A accepts its input if its final quantum state 
belongs to a subspace of FC, say Hacc- Let Pace be the projector onto T-Lacc- In 
this case, the model is given by A = (fH, S, E, po, Pace), A is said to 

accept with quantum fashion, and we call it a Q-HQA for short. The probability 
that A accepts its input re G E* is given by 

Pa{w) = Tr(Faec(AI^,/xo)(s)). 

seS 

Based on the above two basic accepting fashions, HQA can generally have a 
mixed accepting fashion. In this case, the model is called M-HQA for short and is 
represented by ^ = {FL, S, E, po, {Ma}aGY,, F, Pace)- The accepting probability 
on input w G E* is give by 

PaM = Tr(Faec(M^,^o)(s)). 

seF 
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Remark 1. (i) It is obvious that a probabilistic automaton is a degenerate C- 
HQA in which M{s,t) = Ps,tl for all s,t € S with {ps,t)s,teS being a stochastic 
matrix, and po{s) = PsP for some density operator p and s G S with {ps)s^s 
being a probabilistic distribution, (ii) Note that we characterized three models 
of quantum finite automata in the framework of hybrid systems in 1^; all of 
them can be regarded as a concrete implementation of the HQA model defined 
in this paper. For example, CL-IQFA 0 and IQCFA 0 are instances of C- 
HQA, and IQFAC 2l| are instances of Q-HQA. Thus, the HQA given by us is 
a generalized model. 


Associated with the oMC model, there is another quantum automaton model 


that was studied in 


15, 


111 . 


Definition 4. A quantum automaton (QA) is a tuple A = {%, S, po, {fo-jo-gE, Pace) 
where % is a Hilbert space, E is an alphabet, po G 'D{'H) is the initial state, is 
a trace-preserving quantum operation for each a G T,, Pace denotes a projector 
onto a subspace of H (called an accepting subspace). A is said to be finite, if 
E and dim('H.) are finite. For each input w = cti ■ • • Ufe G E*, the accepting 
probability is given by Pa(w) = Tr(Pacc£wipo)) where £w = Eak '' ’ ^o-i • 

Implied by Theorem [I] we have the following result. 


Lemma 1. For each HQA A over alphabet E, there is a QA A! such that 
PAiw) = Pa'{w) for all w G Yi*. 


Proof. The idea is similar to the procedure of simulating hqMC by qMC, and we 
sketch it as follows. Given an HQA A = (H, S, E, pq, we construct a 

QA A' = in', Y,po, P(cc) where Po = Esgs|s)(s|(8>/xo(s), 

and for each a G Y, £a is constructed from as done in Theorem [TJ Let 
Pw = £w{pq) and pw = M^po with w G Y*. Then as shown in Theorem [T] we 
have Pw = SsgS I'®)('®I ® Pw{s). The last step is to construct P(ccj which is 
dependent on the accepting fashion of A: 

(a) If A is a C-HQA and assume that its classical accepting set is F G S, then 
we let P'aac = Esgf |s)('S| ® In- 

(b) If A is a Q-HQA with projector is Pace, then we let P^^c = Ins ® Pace- 

(c) If A is an M-HQA, then let P(ac = J2seF l®)('S| ® Pace- 

In any case, it is easy to verify that Pa{w) = Pa'{w) for all re € E*. □ 
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Remark 2. From the above result it follows that HQ A do not surpass QA in 
the sense of language recognition power. Note that it has been shown that finite 
QA recognize with bounded error exactly the family of regular language [isj. 

In the following we introduce another model that was called bilinear machine 

in [l^ . 

Definition 5. A bilinear machine (BLM) is a tuple A = (n, S, {Mo-jo-gE, tt, rj) 
where n is called the state number of A, T, is a finite alphabet, G ([pT-xn 
is a transition matrix for each cr G E, tt G C" is a column vector, and rj G C” is 
a row vector. Automaton A assigns each w = tri • ■ • dfe G E* a weight Pa{w) as 
Pa{w) = iMuk ' ■ ■ Afo-iTT. A is a probabilistic automaton if it is further required 
that each Ma- is a stochastic matrix, n is a probabilistic distribution, and rj has 
entries being 1 or 0. 

Every finite QA can be simulated by a BLM, which is stated formally as 
follows. 

Lemma 2. For each finite QA A over alphabet E, there is a BLM A' such that 
Pa'{w) = Pa{w) for all w G Yi*. 

Proof. Let finite QA A = (R, E, po, {^o-lo-es, Lace)- For each tr G E, suppose 
that £aip) = denote 



k 


Then by Eq. ([2]), we have 

vec{£aj{p)) = Aa^vec{p), 
vec{£a^£a^{p)) = Aa^Aa.,vec{p). 

As a result, the probability of A accepting w = ai • ■ ■ ,ak GY* can be rewritten 
in the following: 


PAiw) = P^[Pacc£ak ' ' ' ^cri(Po)) 

= vec{PaccVvec{£ak • • • (po)) 

= vec{PaccVA„^ ■ ■ ■ A,y^A„.^vec{pif) 


where the second equality follows from Eq. @. Therefore, we construct 


BLM A! = (n, E, {Mo-jergs, ck, p) with n 
TT = rec(po), and p = uec(Pacc)^- 


dim(f-L)^, Ma = A^ for cr G E, 

□ 
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In classical automata theory, it is a fundamental problem to decide wether 
two probabilistic automata have the same accepting probability for each input 
(that is known as the equivalence problem) 


2C 
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13| . This problem has some 


nontrivial applications; for example, [g applied it to verification of equivalence 
between processes, and 18, ^ applied it to verification of equivalence between 


probabilistic programs. Taking account into that the model of HQA is suited 
to describe hybrid systems (including quantum programs), it is meaningful to 
consider the equivalence problem for HQA. Formally, the equivalence problem 
is as follows. 

Definition 6. Two HQA (QA, BLM) Ai and A 2 over the same alphabet E are 
k-equivalent, if = Pa 2 {'w) for all w € E-^. Furthermore, they are said 

to be equivalent if Pai{w) = Pa 2 {w) holds for all w € E*. 

The history for the equivalence problem of probabilistic automata is as fol¬ 
lows. Paz 0 proved that two probabilistic automata are equivalent if and only 
if they are (ni + n 2 — l)-equivalent, where ni and 712 are state numbers of the 
two automata. Afterwards, this result was improved by Tzeng 2^ who pro¬ 
posed a polynomial-time algorithm determining whether two given probabilistic 
automata are equivalent or not, and the time complexity is 0(|E|(ni -I- 712 )^). 
Recently, an improved complexity 0(|E|(ni -I- 712 )^) was reported in 0|. As 
mentioned in |16l | , all these results are based on some ordinary knowledge about 
matrices and linear spaces rather than on any essential property of probabilistic 
automata; as a result, they also hold for BLM. We summarize these results as 
follows. 


Lemma 3. Two BLM Ai and A 2 over E are equivalent if and only if they are 
{ni + n 2 — 1)-equivalent, and there exists a 0(|E|(77i -I- 712 )^) time algorithm 
deciding whether they are equivalent or not, where ni and ni are state numbers 
of Ai and A 2 , respectively. 


For the sake of completeness, we present an algorithm for BLM’s equivalence 
problem in Algorithm 1. For algorithmic purposes we assume that all inputs 
consist of complex numbers whose real and imaginary parts are rational numbers 
and that each arithmetic operation on rational numbers can be done in constant 
time. Let Q be the set of vectors that have been added into queue, and let 


S = span 



e E* 


where Mf, = for w = Wk ■ ■ ■ W 2 W 1 and it is similar for M^. 

Then the relationship among B, Q and S is: Q can be proved to be a basis for 
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<S, and B is obtained from Q by the Gram-Schmidt procedure and thus is an 
orthonormal basis for S. Therefore, Ai and A 2 are equivalent (i.e., r]iui = 772 M 2 



holds for all elements 



€ Q. Let n = m + n 2 - Then |Q| = \B\ is at most n and the procedure 

V ^2 y 

b := u — ^i,.^i^iu*bi)bi takes at most 0 ( 11 ?) time. The total time complexity is 
thus 0(|E|n^). 


Input: A = (ni,E, {M*}aeE,7ri,»7i) for i = 1, 2. 
Output: .4i and A 2 are equivalent or not. 



B := 0; queue := 0; tt := 


If 771 TTi ^ ri2iT2 then 

return “Ai and A 2 are not equivalent”; 
If ||7r|l = 0 then 

return ‘Ai and A 2 are equivalent”; 

B ■= add tt to queue-, 

while queue 7^ 0 do 



for all cr € E do 

begin 

ui = U2 = M^V2-, 

if rjiui / r)2U2 then 

return ‘ Ai and A 2 are not equivalent”; 



b — u bi)hi‘, 

if ||fo|| 7^: 0 then 


add u to queue-, 



end; 


end; 

return “Ai and A 2 are equivalent”; 


Algorithm 1: Determining whether two BLM are equivalent or not. 
Remark 3. In Definition [51 if it is required that P_Ai (w) = Pa 2 {w) holds for 
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all w G S+ instead of for all w G T,*, then the algorithm almost keeps the same 
and the complexity has no change. This case will be used in the next section 
for the trace equivalence problem of quantum Markov chains. 

Now it follows from Lemmas [I] [5] and [3] that the equivalence problem of finite 
HQA is decidable in polynomial time. 

Theorem 2. Two finite HQA Ai = \ S, (* = 1;2) 

are equivalent if and only if they are ((nifci)^ + ( 712 ^ 2 )^ — 1)-equivalent where 
Ui = dim{HS'^) and ki = Furthermore, there exists a polynomial-time 

algorithm deciding whether they are equivalent or not. 

In the next section, we will show that the trace equivalence problem of 
quantum Markov chains can be transformed in linear time to the equivalence 
problem of QHA, and thus is also decidable in polynomial time. 

5. Trace equivalence of quantum Markov chains 

Feng et al 0 used the model of hqMC for model-checking quantum protocols 
where the purpose is to check whether the classical component of a hybrid 
system satisfies some given property. To that end, a labeling function was used 
to associate each classical state a set of atomic propositions that are satisfied 
at that state. In this paper, we called such an hqMC equipped with a state 
labeling function a state-laheled hybrid quantum Markov chain (SL-hqMC, for 
short). Also, we require that the hqMC is finite, although finiteness is not 
a necessary requirement for a general definition. The formal definition is as 
follows. 

Definition 7. A state-labeled hybrid quantum Markov chain (SL-hqMC) is a 
tuple 

M = {n,S,M,pLo,AP,L), 

where 

1. {TL, S, M, iiq) is a finite hqMC; 

2. AP is a finite set of atomic propositions; 

3. L : S ^ 2^^ is a labeling function. L can be extended to finite sequence 
of states as L{soSi ... Sn) = L(so)L(si) ■ ■ ■ L{sn). 

In the sequel, for the sake of simplicity we let E = 2^^, and call it a labeling 
set. Then L assigns each state s G S a. symbol a gT,. For s = sqSi ■ ■ ■ Sk G 5'+, 


17 


let 


k 

Ps = tt Af(sj,Sj_i)(/io(so)) (8) 

i=l 

where 0”=! = ^n - ■■ ^ 2^1 • Then Tr(ps) gives the probability of visiting the 
sequence of states sqSi ■ ■ • Sk when M. starts in the initial distribution /tq- Thus, 
SL-hqMC M defines a function Pm '■ S'*" ^ [0,1] by 

Pm{w) = ^ Tr(p5). 

s\L{s)—w 

This gives the probability of observing w G S'*" when M starts in the initial 
distribution /iQ. 

In the following, we consider the trace equivalence problem of SL-hqMC. As 
shown in [^, the issue of trace equivalence is closely related to model checking 
linear-time properties of nonprobabilistic transition systems. For probabilistic 
systems, this problem was also discussed in Q. The definition of trace equiva¬ 
lence is as follows. 

Definition 8. Two SL-hqMC A4i and A42 with the same labeling set S are 
trace equivalent if PmAw) = PM^icA for all w G S'*'. 

In the following, we transform the trace equivalence problem of SL-hqMC to 
the equivalence problem of finite C-HQA that is decidable in polynomial time 
as shown in Theorem [5J 

Lemma 4. For every SL-hqMC A4 with labeling set E, we can construct in 
linear time a finite C-HQA A such that Pa{w) = Pm{w) for all w G S’*". 

Proof Let M = {H., S, M, qio, AP, L) be an SL-hqMC. Note that E = 2^^. 
We construct C-HQA A = fH, S', E,/rg, {Mo-jcreEj P) as follows. 

• S' = S U {r}; 

• /io(s) = fJ-o{s) for all s G 5" and AqA) is the zero operator in 

• F = S; 

• For each cr G E, is constructed as 

M, = MD, 
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where M is a block matrix: 


M = 


M 0 \ 

0 I j ' 


That is, M{s,t) = M{s,t) for s,t € S, = I, and others are 0 . is 

given by 


( 


= 


L(si),(T-' 

0 


^L{s2),(T^ 


V <5 


L(si),u- 


I 6 




L{Sn) , 0 " 
^ L(sn) ,a- 


0 \ 
0 


X 0 

I I J 


That is, D^{s,s) = SL{s),a^, D^{t,s) = for all s £ S, = X, 

and others are 0. In the above, for s G S' and ct G E, the meaning of is 


^L{s),a 


1, if L{s) = ct; 
0, otherwise. 


In addition, 6L(s),cr = 1 - 

It is obvious that M and satisfy the property that the sum of each column 
is a trace-preserving quantum operation, and their multiplication also satisfies 
this property. 

By the above construction, A satisfies the following property. 

Proposition 1. Let w = ctocti ■ ■ ■ ak G and Then for any 

s € S, we have 

k 

h'wis)= ( 9 ) 

L{so---Sk)=w i=l 

where L{so ■ ■ • Sk) = w stands for “sq, ■ • ■ ,Sk G S : L{so ■ • ■ Sk) = w” and we 
will always adopt this succinct notation in the sequel. 
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Proof. We prove it by induction on k. When fc = 0, for s G S we have 


k-aois) = (M^oMo)(s) = (^£’^oMo)(s) 
= ^(s>so)(-D^oMo)(so) 

Sq^S' 

= ^(s>so)(-DaoA<o)(so) 

Sq^S 

= ^L{so)aoM{s,So){fioiso)) 

Sq^S 

= ^(s>so)(Mo(so))- 

L{so)=cro 


Suppose the result holds for k. Then for s G S and ak+i G S we have 

f^wa^+^is) = = {M 

= ^ ' M[s, Sk+l){Dcr^,^^fJ,.^){sk+l) 

^k + l^S' 

Sk + l^S 

~ ^ ' ^L{sk+i)(Tk+i^i^t ^k+l)ik'iu{^k+l)) 

Sk + l^S 

k 

= ^L(‘>k+l)crk+i^{s,Sk+l) M(Sfe+i,Sfc)]^M(s„S,_i)(/io(so)) 

Sk+i^S L{so---Sk)—uj i—l 

fc+l 

= X! M(s,Sfe+i) M(s*,Si_i)(/ro(so)) 

L(so'"Sj5+i)=ii)iTfc+i i=l 

where (b) is achieved by substituting Eq. © for /ij„(sfc+i)- Thus we have 
proved Proposition 1. □ 
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Now for w = CToCTi • • • (T/c £ S+j the accepting probability of A is 


Pa{w) = Tr ( ) 

VseS / 


=Tr E E M{s, Sk) M(si, Si_i)(^o(so)) 

\s^S L{so---Sk)—'UJ i—1 

( k ^ 

E ^ ('5; ^ 1) (Mo (*^ 0 ) ) 

sGS i—1 / 

= E Tr |]^M(si,s,_i)(Aio(so)) j 

L(so-"Sfe)=u! \i=l / 

=Pm(w) 


A 


where (c) holds because X^sgStrace-preserving. This completes the 
proof of Lemma [H □ 


Therefore, based on Theorem[2]and LemmaHJ we obtain the following result. 

Theorem 3. The trace equivalence problem of SL-hqMC is decidable in poly¬ 
nomial time. 


6. Quantitative analysis of linear-time properties 

Recall that T* denotes the set of all finite-length seqnence over nonempty set 
T. We also need another notation T“ that stands for the set of all infinite-length 
sequence over T. Let M = {TL, S, M, piQ, AP, L) be an SL-hqMC. A path tt of 
M is an infinite seqnence of states sosi • • • G 5'“ where M{si+i,Si) ^ 0^^ for all 
i > 0. A finite path tt is a finite prefix of a path. The sets of all infinite and 
finite paths of M starting in state s are denoted by Path-^{s) and Path-^j^{s), 
respectively. 

6.1. Super-operator valued measure 

It is a central problem to determine the accumnlated super-operator along 
certain paths for reasoning about the behavior of an SL-hqMC. For example, if 
we can first determine the accnmulated snper-operator nf=i M{si,Si-i) in Eq. 
®, then it is easy to compute the state Ps for an arbitrarily given initial state pq. 
To this end, the super-operator valued measure (SVM for short) was proposed in 
[^, which plays a similar role as probability measure for probabilistic systems. 
We recall the definition of SVM and some related facts as follows. 
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Definition 9. Let (f2, E) be a measurable space; that is, LI is a non-empty set 
and E a a-algebra over LI. A function A : E ^ SX{T-i) is said to be a super¬ 
operator valued measure (SVM for short) if A satisfies the following properties: 

1. A(rj) ~I; 

2. A(l+J^ Ai) for all pairwise disjoint and countable sequence Ai, 

A 2 , ■. ■ in LI. 

We call the triple (il, E, A) a (super-operator valued) measure space. 


Given an SL-hqMC M and a state s € S, for any finite path tt = sg • ■ • s™ S 
Path^ni^), we define the super-operator 


Q(7f) 


I, if n = 0; 

M{sn, Sn-i) ■ ■ ■ M(si, So); Otherwise. 


Next we define the cylinder set Cyl{Tr) C Path^{s) as 


CylifK) = {tt G Path'^{s) : ^ is a prefix of tt}; 


that is, the set of all infinite paths with prefix ri. Let 

5^(s) = {^^^(Tf) : Ti G Path^i„{s)} U { 0 }. 

Qs is a mapping from 5^(s) to SlifH), defined by letting Qs{%) = and 


QsiCylin)) = Q(?f). 


Then we have the following result. 

Lemma 5 (0). The mapping Qs defined above can be extended to a SVM, 
denoted by Qs again, on the a-algebra generated by iS^(s). Furthermore, this 
extension is unique up to the equivalence relation tz. 


6.2. Linear-time Properties 

A linear-time (LT) property over the atomic proposition set AP is defined 
to be a subset P of . In the remainder of this section, we consider some 

special classes of linear-time properties. Safety is one of the most important 
kinds of linear-time properties. A safety property specifies that “something bad 
never happens”. 

Definition 10. An LT property P over AP is called a safety property if for all 
words a G (2"^^)“’ \ P there exists a finite prefix a G (2"^^)* of a such that 

P n {a' G {2^^Y is a finite prefix of cr'} = 0. 
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Any such finite word a is called a bad prefix of P. We write BPref{P) for 
the set of bad prefixes of P. Note that BPref{P) is a language over E = 2'^^. 

A safety property P is called a regular safety property, if its bad prefix set 
BPref{P) is a regular language. 

As we know, for each regular language there exists an NFA accepting it. An 
NFA is a tuple A = {Q, E, 5, Qo, F) where Q is finite state set, E is a finite 
alphabet, 5 : Q x E — 5 - 2 Q 

is a transition function, Qo Q denotes a set of 
initial states, and F Q Q is called the accepting set. We often write g A p if 
p € S{q,a) where q,p € Q and a G E. A string w = 0102 ■ • ■ a„ € E* is said 
to be accepted by A, if there exists a finite state sequence qoqi • ■ • qn such that 
Qo € Qo, qi-i A gi for 1 < i < n, and qn € F. The language accepted by A, 
denoted by C{A), is the set of strings over E that are accepted by A. 

A DFA is a special NFA A = {Q, E, 5, Qq, F) where |(5o| = 1 and a)| < 1 
for all g G Q and a G E. Then a DFA is usually denoted by A = {Q, E, 5, go, F) 
where go is the unique initial state. If it is further required that |5(g,a)| = 1 
for all g G Q and a G E, then A is called a total DFA. Note that NFA, DFA 
and total DFA accept the same language class, i.e., regular languages. In the 
sequel, when mentioning a DFA, we always assume it is total. 

Therefore, a safety property can be characterized by a DFA. 

6.3. Quantitative analysis of regular safety properties 

Given an SL-qhMC M = {V., S, M, po, AP, L), a state s G S', and an LT 
property P, let 

Qs{s \= P) = Qs{t^ G Path-'^{s) : L{tt) G P} 

where T( 7 r) = L{so)L{si) • • • is called the trace of path tt = sosi • • • • In the fol¬ 
lowing we show how to determine this quantity if P is a regular safety property. 

First we note that Qs{s \= P) + Qs{s ^ P) ^ X where 

Qs{s ^ P) = (5s{7r G Path-'^{s) : L{tt) ^ P} 

= Qs{Tf G Path^{s) : pref{L{TT)) n C{A) 7 ^ 0 } 

where pref{AoAi • • •) denotes the set of all finite prefixes of AqAi • • • G (2'^^)“, 
and A is a DFA accepting BPref{P). In order to get the quantity Qs{s ^ P), 
we need the concept of product between SL-hqMC and DFA. 

Definition 11. Let M. = {XL, S, M, po, AP, L) be an SL-hqMC and A = {Q, 2^^, 6, go, P) 
be a DFA. Then product A4 <S> A is the SL-hqMC: 

A = {XL, S X Q, M', Pq, {accept}, L') 
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where L'{{s,q)) = {accept} if q G F and L'{{s,q)) = 0 otherwise, and 




/^o(s), if q = S{qQ,L{s)); 
0 , otherwise. 


The transition mapping in A4 (E) A is given by 


M'{{s',q'),{s,q)) 


M{s',s), if q'= 5{q,L{s')); 
0 , otherwise. 


For each path tt = soSiS 2 • • • in there exists a unique sequence of states 
qoqiq 2 ■ ■ ■ A A for L^n) = L{so)L{si)L{s 2 ) ■ ■ ■ such that 


L(so) L{si) L{s2) 

qo —> qi —> q 2 —S' 


and 

= {so,qi){si,q2){s2,q3) ■ ■ ■ 

is a path \n M. 'E A. Vice versa, every path in Ad ® A which starts in state 
(s, ^(go, L{s))) arises from the combination of a path in Ad and a corresponding 
state sequence in A. The corresponding relation between the states are depicted 
in Fig. [21 


i ^ 0 - 


-'x- *-'‘^2 -^ • • • 

? 0 —^ 


— ? 2 —-► 


tdsp 


Figure 3 : States in At ® A. 


Note that the DFA A does not affect the accumulated super-operator along 
a path. That is, for each measurable set 11 C Path^{s), 

n+ 

where the superscripts Ad and M E A are used to indicate the underlying 
systems. In particular, if 11 is the set of paths that start in s and refute regular 
safety property P, i.e., 

n = {tt G Path^{s) : pref{L{TT)) fl C{A) ^ 0} 

where A is a DFA accepting BPref{P), then 11+ is the set of paths in Ad 0 A 
that start in {s,S{qo, L{s))) and eventually reach an accept state of A: 

n+ = {7r+ G Path-^'^'^{{s,S{qo,L{s)))) : G ()accept}. 
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Here the linear temporal logic notation “Oaccept” is used to denote the LT 
property over AP = {accept} consisting of sequence AqAi • • • G for 

which there exists a finite index i such that Ai = {accept}. This shows that 
Qs{s ^ P) can be derived from the accumulated super-operator for A4 iS> A 
reaching the set B = S x F starting from {s,S{qo,L{s))). The latter problem, 
known as the reachability problem, can be solved by using Theorem 2.5 in Q. 
This is formally stated as follows. 

Theorem 4. Let P be a regular safety property, A a DFA for the set of bad 
prefixes P, A4 an SL-hqMC, and s a state of Ad. Then: 

Qs{s^P)rzT-Qs{s^P) 

~ ^ h <>accept) 

where qs = S{qQ, L{s)). 

Remark 4. Note that in the above procedure, we used an assumption that 
e ^ A.{A). Otherwise, the proof would fail. However, this is not a severe 
restriction since if e G A-{A), then all finite words over 2^^ are bad prefixes, and 
hence, P = 0 . In this case, Qsi.s ^ P) = 0. 

6 . 4 . Questions on quantitative analysis of uj-regular properties 

In the above, we have taken a quantitative analysis of regular safety proper¬ 
ties. Then it is natural to consider the quantitative analysis of more general LT 
properties; for example, how about w-regular properties? w-regular properties 
are a much larger family of LT properties than regular safety properties, and 
they are characterized by Biichi automata. 

A nondeterministic Biichi automaton (NBA) is represented by the same 
tuple A = {Q, S, 6 , Qo, F) as an NFA, but with a different accepting condition. 
An infinite string w = aia 2 ■ ■ ■ G is said to be accepted by NBA A, if there 
exists a sequence qoqi ■ ■ ■ £ Q‘^ such that qo £ Qo, Qo ^ Qi ^ Q 2 , and qi £ F 
for infinitely many indexes f > 0. The language accepted by NBA A, denoted 
by, C,^{A), is the set of all infinite strings over S that are accepted by A. The 
class of languages accepted by NBA are called uj-regular languages. An NBA is 
called a deterministic Biichi automaton (DBA) if its underlying automaton is a 
DFA. Note that DBA can only accept a proper subset of w-regular languages. 

An LT property P over AP is called a uj-regular property, if P is a w-regular 
language over the alphabet S = 2"^^. If P is a w-regular property, then its 
complement (2^^)‘^ \ P is also a w-regular property. Note that the regular 
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safety property discussed before is a special case of w-regular properties. The 
reader can refer to Ql for the details about w-regular properties. 

Now we consider the problem of quantitative analysis of w-regular properties. 
Formally, given a state s of SL-hqMC A4 and a w-regular property P, how to 
determine the following value: 

Qs{s \= P) = Qs{t^ G Path^{s) : L{n) G P}. 

Here we consider a relatively simple case, that is, assume P = Ci^{A) for a DBA 
A. Then by similar technical treatments as before, we get that 

Qs{s \= p) = 1= □Oaccept) 

where qs = S{qo,L{s)), and “D(}accept” denotes the LT property over AP = 
{accept} consisting of sequence AqAi • • • G (2^'^)'^ for which there exist infinite 
many indexes i such that Ai = {accept}. Intuitively, it means that the product 
system M. ® A starts in {s,qs) and visits the set S x F infinitely often. 

At first glance, one many think this quantity can be determined as done 
for probabilistic systems [^. It is, however, not so easy as it looks like. In the 
probabilistic case. Ad is a Markov chain and the SVM measure Qs is replaced by 
the probability measure Ps- Then, calculating Ps{s \= P) is finally reduced to 
finding bottom strongly connected components (SCCs that once entered cannot 
be left anymore) in the underlying graph (a digraph obtained by erasing the 
edge labels from the transition graph) of Markov chain A4 <S> A. The latter 
problem depends only on the topological structure and has no relation with the 
actual transition probability, and thus can be solved by using graph-theoretical 
searching algorithms. However, this method no longer takes effect in quantum 
cases, since two states connected in the underlying graph are not necessarily 
connected in the corresponding quantum Markov chain. In order to explain this 
point more clearly, we have a look at an example below. 

In Fig. 0] the two systems have the same underlying graph. It can be seen 
that the reachability in MC is consistent with that in its underlying graph. For 
example, S 3 is reachable from sq by passing S 2 in the underlying graph, and at 
the same time S 3 can be reached from sq with probability ^ in MC. However, 
this consistency no longer holds for hqMC. For instance, S3 is not reachable from 
So in qMC, since the accumulated super-operator along S0S2S3 is 0. Therefore, 
the quantitative analysis of general w-regular properties for quantum Markov 
chains cannot be addressed by using graph-theoretical algorithms. Whether this 
problem is solvable or not is currently not clear and needs further exploration. 
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Figure 4: Difference between MC(left) and hqMC (right): Both are given by their transition 
graphs and the middle is their underlying graph that is obtained by erasing the edge labels. 
The underlying space of hqMC is a qubit and Sq and E\ have operation element sets {|0}(0|} 
and {|1}(1|}, respectively. 


7. Conclusion 

In this paper, we have studied a novel model of quantum Markov chains. 
Although this model has the same expressive power as the conventional one, 
we have shown that it is very suited to describe hybrid systems that consist 
of a quantum component and a classical one. Based on the quantum Markov 
chain model, we have further proposed an automaton model called hybrid quan¬ 
tum automata that can be used to describe hybrid systems that receive input 
(or actions) from the outer world. The language equivalence problem of hy¬ 
brid quantum automata has been shown to be decidable in polynomial time, 
and furthermore we have applied this result to the trace equivalence problem 
of quantum Markov chains which is thus also decidable in polynomial time. 
Finally, we have discussed model checking linear-time properties of hybrid sys¬ 
tems, showing that the quantitative analysis of regular safety properties can 
be addressed successfully as done for stochastic systems, but the problem for 
general w-regular properties is more difficult and needs further exploration. 

Hybrid systems modeled by quantum Markov chains have already been often 
encountered in quantum information processing, and the quantum engineering 
systems developed in the future will most probably be hybrid systems. There¬ 
fore, it is worth developing a theory for describing and verifying these hybrid 
systems. We hope this work can stimulate further discussion. 
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